INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-9,10.128.0.43' (ECDSA) to the list of known hosts. 2017/08/18 11:24:26 parsed 1 programs 2017/08/18 11:24:26 executed programs: 0 2017/08/18 11:24:31 executed programs: 1324 2017/08/18 11:24:36 executed programs: 2550 2017/08/18 11:24:41 executed programs: 3783 2017/08/18 11:24:46 executed programs: 5014 2017/08/18 11:24:51 executed programs: 6241 2017/08/18 11:24:56 executed programs: 7470 2017/08/18 11:25:01 executed programs: 8690 2017/08/18 11:25:06 executed programs: 9921 2017/08/18 11:25:11 executed programs: 11148 2017/08/18 11:25:16 executed programs: 12378 2017/08/18 11:25:21 executed programs: 13610 2017/08/18 11:25:26 executed programs: 14842 2017/08/18 11:25:31 executed programs: 16065 2017/08/18 11:25:36 executed programs: 17297 2017/08/18 11:25:41 executed programs: 18530 2017/08/18 11:25:46 executed programs: 19767 syzkaller login: [ 191.801809] [ 191.801863] ------------[ cut here ]------------ [ 191.801877] WARNING: CPU: 0 PID: 9302 at kernel/futex.c:818 get_pi_state+0x15b/0x190 [ 191.801881] Kernel panic - not syncing: panic_on_warn set ... [ 191.801881] [ 191.801887] CPU: 0 PID: 9302 Comm: syz-executor7 Not tainted 4.13.0-rc5+ #40 [ 191.801891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.801893] Call Trace: [ 191.801905] dump_stack+0x194/0x257 [ 191.801915] ? arch_local_irq_restore+0x53/0x53 [ 191.801930] panic+0x1e4/0x417 [ 191.801938] ? __warn+0x1d9/0x1d9 [ 191.801944] ? show_regs_print_info+0x65/0x65 [ 191.801957] ? retint_kernel+0x10/0x10 [ 191.801968] ? get_pi_state+0x15b/0x190 [ 191.801975] __warn+0x1c4/0x1d9 [ 191.801980] ? get_pi_state+0x15d/0x190 [ 191.801986] ? get_pi_state+0x15b/0x190 [ 191.801995] report_bug+0x211/0x2d0 [ 191.802011] fixup_bug+0x40/0x90 [ 191.802019] do_trap+0x260/0x390 [ 191.802031] do_error_trap+0x120/0x390 [ 191.802038] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 191.802047] ? do_trap+0x390/0x390 [ 191.802054] ? get_pi_state+0x15b/0x190 [ 191.802060] ? print_usage_bug+0x480/0x480 [ 191.802074] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 191.802086] do_invalid_op+0x1b/0x20 [ 191.802091] invalid_op+0x1e/0x30 [ 191.802103] RIP: 0010:get_pi_state+0x15b/0x190 [ 191.802107] RSP: 0018:ffff8801cb2af090 EFLAGS: 00010297 [ 191.802113] RAX: ffff8801cf82a080 RBX: 0000000000000000 RCX: 1ffff10039655e17 [ 191.802117] RDX: 0000000000000000 RSI: 1ffff10039f05524 RDI: ffff8801d95e33c0 [ 191.802121] RBP: ffff8801cb2af120 R08: 0000000000000001 R09: 0000000000000000 [ 191.802124] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff10039655e13 [ 191.802128] R13: ffff8801d95e33c0 R14: 1ffff10039655e17 R15: ffff8801d95e3470 [ 191.802150] ? futex_wait_queue_me+0x7e0/0x7e0 [ 191.802159] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 191.802170] exit_pi_state_list+0x543/0x780 [ 191.802185] ? futex_wait_requeue_pi.constprop.19+0x1300/0x1300 [ 191.802193] ? lock_release+0xa40/0xa40 [ 191.802201] ? check_same_owner+0x320/0x320 [ 191.802208] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 191.802221] ? __might_sleep+0x95/0x190 [ 191.802232] ? __might_fault+0x188/0x1d0 [ 191.802244] ? do_raw_spin_trylock+0x190/0x190 [ 191.802254] mm_release+0x46d/0x590 [ 191.802261] ? mm_access+0x140/0x140 [ 191.802267] ? _raw_spin_unlock_irq+0x27/0x70 [ 191.802275] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 191.802282] ? trace_hardirqs_on+0xd/0x10 [ 191.802288] ? _raw_spin_unlock_irq+0x27/0x70 [ 191.802295] ? acct_collect+0x637/0x800 [ 191.802305] do_exit+0x470/0x1b10 [ 191.802312] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 191.802323] ? hrtimer_try_to_cancel+0x2a4/0x5c0 [ 191.802330] ? lock_downgrade+0x990/0x990 [ 191.802338] ? hrtimer_forward+0x2d0/0x2d0 [ 191.802345] ? mm_update_next_owner+0x930/0x930 [ 191.802350] ? do_raw_spin_trylock+0x190/0x190 [ 191.802363] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 191.802370] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 191.802377] ? trace_hardirqs_on+0xd/0x10 [ 191.802386] ? hrtimer_try_to_cancel+0x9a/0x5c0 [ 191.802396] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 191.802403] ? do_raw_spin_trylock+0x190/0x190 [ 191.802410] ? fault_in_user_writeable+0x90/0x90 [ 191.802424] ? fixup_pi_state_owner.isra.16+0x980/0x980 [ 191.802434] ? check_noncircular+0x20/0x20 [ 191.802444] ? hrtimer_cancel+0x2e/0x40 [ 191.802452] ? futex_wait_requeue_pi.constprop.19+0x8a8/0x1300 [ 191.802464] ? futex_requeue+0x2370/0x2370 [ 191.802474] ? find_held_lock+0x35/0x1d0 [ 191.802486] ? get_signal+0x855/0x17e0 [ 191.802493] ? lock_downgrade+0x990/0x990 [ 191.802506] do_group_exit+0x149/0x400 [ 191.802512] ? __lock_is_held+0xb6/0x140 [ 191.802519] ? SyS_exit+0x30/0x30 [ 191.802524] ? _raw_spin_unlock_irq+0x27/0x70 [ 191.802532] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 191.802542] get_signal+0x7e8/0x17e0 [ 191.802571] ? ptrace_notify+0x130/0x130 [ 191.802577] ? vma_wants_writenotify+0x3b0/0x3b0 [ 191.802585] ? vma_link+0xe9/0x170 [ 191.802599] ? exit_robust_list+0x240/0x240 [ 191.802608] ? find_held_lock+0x35/0x1d0 [ 191.802619] do_signal+0x94/0x1ee0 [ 191.802626] ? vm_mmap_pgoff+0x1ed/0x280 [ 191.802634] ? should_fail+0x23b/0xa40 [ 191.802644] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 191.802652] ? setup_sigcontext+0x7d0/0x7d0 [ 191.802662] ? find_held_lock+0x35/0x1d0 [ 191.802677] ? lock_downgrade+0x990/0x990 [ 191.802683] ? down_write+0x120/0x120 [ 191.802691] ? lock_release+0xa40/0xa40 [ 191.802698] ? check_same_owner+0x320/0x320 [ 191.802705] ? vm_mmap_pgoff+0x1fc/0x280 [ 191.802711] ? exit_to_usermode_loop+0x98/0x300 [ 191.802723] exit_to_usermode_loop+0x224/0x300 [ 191.802733] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 191.802740] ? kasan_check_write+0x14/0x20 [ 191.802754] syscall_return_slowpath+0x3a7/0x450 [ 191.802762] ? prepare_exit_to_usermode+0x220/0x220 [ 191.802769] ? entry_SYSCALL_64_fastpath+0x91/0xbe [ 191.802777] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 191.802785] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 191.802796] entry_SYSCALL_64_fastpath+0xbc/0xbe [ 191.802801] RIP: 0033:0x4512e9 [ 191.802804] RSP: 002b:00007f458d8b5c08 EFLAGS: 00000216 ORIG_RAX: 00000000000000ca [ 191.802810] RAX: 0000000000000000 RBX: 00000000007180a8 RCX: 00000000004512e9 [ 191.802814] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000000002000cffc [ 191.802817] RBP: 0000000000000840 R08: 0000000020048000 R09: 0000000000000000 [ 191.802821] R10: 000000002000b000 R11: 0000000000000216 R12: 00000000004b6946 [ 191.802825] R13: 00000000ffffffff R14: 000000002000cffc R15: 000080000000000b [ 192.203424] ===================================== [ 192.208234] WARNING: bad unlock balance detected! [ 192.213044] 4.13.0-rc5+ #40 Not tainted [ 192.216985] ------------------------------------- [ 192.221796] syz-executor7/9274 is trying to release lock ( [ 192.221805] kasan: CONFIG_KASAN_INLINE enabled [ 192.231941] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 192.239272] general protection fault: 0000 [#1] SMP KASAN [ 192.244778] Dumping ftrace buffer: [ 192.248285] (ftrace buffer empty) [ 192.251966] Modules linked in: [ 192.255132] CPU: 1 PID: 9274 Comm: syz-executor7 Not tainted 4.13.0-rc5+ #40 [ 192.262287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.271624] task: ffff8801cf3dc180 task.stack: ffff8801d93d8000 [ 192.277656] RIP: 0010:print_lockdep_cache.isra.32+0x64/0xe6 [ 192.283332] RSP: 0018:ffff8801d93ded98 EFLAGS: 00010002 [ 192.288665] RAX: dffffc0000000000 RBX: 1ffff1003b27bdb3 RCX: 0000000000000000 [ 192.295906] RDX: 00000000000000fe RSI: 00000000000007f0 RDI: 00000000000007d8 [ 192.303147] RBP: ffff8801d93dee70 R08: 1ffff1003b27bd5e R09: 0000000000000001 [ 192.310391] R10: 0000000000000002 R11: fffffbfff0e5ef81 R12: 00000000000007d8 [ 192.317646] R13: 00000000000007f0 R14: ffff8801d93deef0 R15: 1ffff1003b27bdda [ 192.324892] FS: 00007f458d8d7700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 192.333094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.338948] CR2: 0000000000461ec0 CR3: 00000001d8f33000 CR4: 00000000001406e0 [ 192.346190] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.353434] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.360673] Call Trace: [ 192.363237] ? print_irq_lock_scenario.isra.30+0x135/0x135 [ 192.368831] ? printk+0xaa/0xca [ 192.372083] ? show_regs_print_info+0x65/0x65 [ 192.376898] ? put_pi_state+0x252/0x520 [ 192.380847] ? put_pi_state+0x252/0x520 [ 192.384792] print_unlock_imbalance_bug+0xe0/0x140 [ 192.389695] lock_release+0x700/0xa40 [ 192.393465] ? put_pi_state+0x252/0x520 [ 192.397413] ? lock_downgrade+0x990/0x990 [ 192.401534] ? lock_release+0xa40/0xa40 [ 192.405482] ? rt_mutex_futex_unlock+0xb3/0x110 [ 192.410121] ? lock_downgrade+0x990/0x990 [ 192.414242] _raw_spin_unlock_irq+0x1a/0x70 [ 192.418534] put_pi_state+0x252/0x520 [ 192.422309] ? attach_to_pi_state+0x3a0/0x3a0 [ 192.426774] ? wake_up_q+0x8a/0xe0 [ 192.430289] ? rt_mutex_futex_unlock+0xc0/0x110 [ 192.434928] ? __rt_mutex_futex_unlock+0x1b0/0x1b0 [ 192.439832] exit_pi_state_list+0x55c/0x780 [ 192.444132] ? futex_wait_requeue_pi.constprop.19+0x1300/0x1300 [ 192.450163] ? lock_release+0xa40/0xa40 [ 192.454111] ? check_same_owner+0x320/0x320 [ 192.458500] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 192.463843] ? __might_sleep+0x95/0x190 [ 192.467794] ? __might_fault+0x188/0x1d0 [ 192.471829] ? do_raw_spin_trylock+0x190/0x190 [ 192.476385] mm_release+0x46d/0x590 [ 192.479983] ? mm_access+0x140/0x140 [ 192.483671] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 192.488660] ? trace_hardirqs_on+0xd/0x10 [ 192.492780] ? _raw_spin_unlock_irq+0x27/0x70 [ 192.497262] ? acct_collect+0x637/0x800 [ 192.501211] do_exit+0x470/0x1b10 [ 192.504636] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 192.509801] ? plist_add+0x5cb/0x760 [ 192.513490] ? mm_update_next_owner+0x930/0x930 [ 192.518138] ? check_same_owner+0x320/0x320 [ 192.522434] ? queued_spin_unlock_wait+0x380/0x380 [ 192.527335] ? lock_acquire+0x1d5/0x580 [ 192.531281] ? futex_wait_setup+0x14a/0x3d0 [ 192.535576] ? __might_sleep+0x95/0x190 [ 192.539535] ? futex_wait_queue_me+0x524/0x7e0 [ 192.544091] ? refill_pi_state_cache.part.6+0x2f0/0x2f0 [ 192.549428] ? check_noncircular+0x20/0x20 [ 192.553634] ? get_futex_value_locked+0xc3/0xf0 [ 192.558277] ? futex_wait_setup+0x22e/0x3d0 [ 192.562577] ? find_held_lock+0x35/0x1d0 [ 192.566623] ? get_signal+0x855/0x17e0 [ 192.570484] ? lock_downgrade+0x990/0x990 [ 192.574615] do_group_exit+0x149/0x400 [ 192.578476] ? __lock_is_held+0xb6/0x140 [ 192.582506] ? SyS_exit+0x30/0x30 [ 192.585934] ? _raw_spin_unlock_irq+0x27/0x70 [ 192.590401] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 192.595391] get_signal+0x7e8/0x17e0 [ 192.599086] ? ptrace_notify+0x130/0x130 [ 192.603122] ? vma_wants_writenotify+0x3b0/0x3b0 [ 192.607855] ? exit_robust_list+0x240/0x240 [ 192.612148] ? find_held_lock+0x35/0x1d0 [ 192.616184] do_signal+0x94/0x1ee0 [ 192.619695] ? vm_mmap_pgoff+0x1ed/0x280 [ 192.623728] ? should_fail+0x23b/0xa40 [ 192.627586] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 192.632663] ? setup_sigcontext+0x7d0/0x7d0 [ 192.636958] ? find_held_lock+0x35/0x1d0 [ 192.640994] ? lock_downgrade+0x990/0x990 [ 192.645114] ? down_write+0x120/0x120 [ 192.648884] ? lock_release+0xa40/0xa40 [ 192.652830] ? check_same_owner+0x320/0x320 [ 192.657124] ? vm_mmap_pgoff+0x1fc/0x280 [ 192.661158] ? exit_to_usermode_loop+0x98/0x300 [ 192.665801] exit_to_usermode_loop+0x224/0x300 [ 192.670376] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 192.675894] ? kasan_check_write+0x14/0x20 [ 192.680105] syscall_return_slowpath+0x3a7/0x450 [ 192.684835] ? prepare_exit_to_usermode+0x220/0x220 [ 192.689838] ? entry_SYSCALL_64_fastpath+0x91/0xbe [ 192.694742] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 192.699731] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 192.704460] entry_SYSCALL_64_fastpath+0xbc/0xbe [ 192.709184] RIP: 0033:0x4512e9 [ 192.712348] RSP: 002b:00007f458d8d6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 192.720026] RAX: 0000000000000000 RBX: 0000000000718020 RCX: 00000000004512e9 [ 192.727267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000718020 [ 192.734510] RBP: 0000000000718000 R08: 0000000000000000 R09: 0000000000000000 [ 192.741750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.748993] R13: 00007fff2e671adf R14: 00007f458d8d79c0 R15: 0000000000000000 [ 192.756238] Code: 03 48 c7 85 30 ff ff ff e3 77 75 85 48 c7 85 38 ff ff ff 89 e4 55 81 c7 02 f1 f1 f1 f1 c7 42 14 f3 f3 f3 f3 48 89 f2 48 c1 ea 03 <80> 3c 02 00 74 08 48 89 f7 e8 95 d4 4a 00 49 8b 45 00 48 85 c0 [ 192.775348] RIP: print_lockdep_cache.isra.32+0x64/0xe6 RSP: ffff8801d93ded98 [ 192.782505] ---[ end trace d30e8bcd3a4895d2 ]---